Apache安装与设置.docVIP

Apache2.0实现https?? 2010-04-13 21:00:12|??分类：?工作日志|举报|字号?订阅 首先安装SSL，再编译安装APACHE，再配置证书即可1. 下载安装apache和openssl网址：，#tar zxvf httpd-2.0.54.tar.gz#tar zxvf openssl-0.9.7g.tar.gz编译安装openssl,这个软件主要是用来生成证书：#cd openssl-0.9.7g#./config#make#make test#make install把 openssl放进内核目录下，使其在任何目录下都能运行。#cd /usr/local/bin#ln -s /usr/local/ssl/bin/openssl openssl编译安装apache#cd /opt/httpd-2.0.54#./configure --prefix=/opt/apache2 --enable-so --enable-ssl --with-ssl=/usr/local/ssl/bin#make#make install 2. 安装完毕，生成证书：在/opt/apache2/conf下建立一个ssl.key目录#cd ../apache2/#cd conf/#mkdir ssl.key然后在该目录下生成证书：#cd ssl.key/生成服务器私钥：#openssl genrsa -des3 -out server.key 1024Generating RSA private key, 1024 bit long modulus.......................++++++.................................................++++++e is 65537 (0x10001)Enter pass phrase for server.key: //密码Verifying - Enter pass phrase for server.key: //确认和上面密码相同生成服务器证书请求，并按要求填些相关证书信息：#openssl req -new -key server.key -out server.csrEnter pass phrase for server.key: //上面的密码You are about to be asked to enter information that will be incorporatedinto your certificate request.What you are about to enter is what is called a Distinguished Name or a DN.There are quite a few fields but you can leave some blankFor some fields there will be a default value,If you enter ., the field will be left blank.-----Country Name (2 letter code) [AU]:CNState or Province Name (full name) [Some-State]:BJLocality Name (eg, city) []:BJOrganization Name (eg, company) [Internet Widgits Pty Ltd]:163Organizational Unit Name (eg, section) []:TDCommon Name (eg, YOUR name) []://行使 SSL 加密的网站地址。请注意这里并不是单指您的域名，而是直接使??????????????????????????????????????????????????????????????????????? 用 SSL 的网站名称 例如:。 一个网站这里的定是：?????????????????????????????????????????????????????????????????????? 是一个网站； 是另外一个网站； 又是另外一个?????????????????????????????????????????????????????????????????????? 网站。Email Address []:lala@Please enter the following extra attrib